$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: C6MxqdyqsC/CZTsKr1oCCimAK++75omUgHz5NhOb3ps= Subject key identifier: 72:98:8E:E5:6D:41:00:B6:43:C9:50:C0:B9:23:2A:A3:F9:03:83:E6 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 03FF Signing time: Sun 29 Jun 2025 00:04:28 +0000 Manifest this update: Sun 29 Jun 2025 00:04:28 +0000 Manifest next update: Sun 06 Jul 2025 00:04:28 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: PT6Bme8MGy3rq3G3RGwdoeK+0VV/1ihEdmEjx26va2c=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Jun 29 00:04:28 2025 GMT Not After : Jul 6 00:04:28 2025 GMT Subject: CN=6860830c-9cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:55:5c:9e:1d:d8:95:c8:3a:24:2a:b5:37: 03:92:71:88:f1:6f:87:4e:9e:86:f6:6d:70:80:86: 12:ad:50:01:84:9c:3c:79:15:a1:56:3b:9d:d8:41: 9f:75:bb:94:10:12:a6:80:20:40:0a:6e:57:da:53: 86:37:b0:28:7f:84:03:70:57:db:bb:c2:0e:01:8e: 9b:c4:3a:1c:97:72:02:5d:79:70:bd:97:8e:de:66: 11:c6:71:57:5a:51:5f:52:37:03:e5:51:3b:d5:14: 62:c0:a8:67:dd:db:37:0b:33:ed:0a:6a:5e:e9:08: 60:1b:34:99:ea:7f:b0:28:a2:e2:60:a7:9f:45:4b: 7a:15:0f:72:51:1f:4a:97:77:bd:7e:fa:33:8f:55: cb:f8:ee:48:93:12:b0:37:90:7c:f8:46:9e:7f:fa: 7c:29:54:7b:7b:0f:8f:8c:76:d7:3c:fd:8f:73:0e: 06:b8:e7:41:b6:9f:ce:dd:25:61:52:01:15:bd:d1: f9:cb:d1:1a:f8:8a:57:86:33:f5:77:1b:17:6e:58: 37:08:92:31:ca:0e:b1:51:42:cd:ec:ec:aa:33:ee: 13:d8:d3:c1:be:c8:d6:5c:e3:3d:8e:0c:93:79:72: 5d:31:76:ba:ce:04:26:61:6e:b3:c5:53:5f:4f:fc: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:98:8E:E5:6D:41:00:B6:43:C9:50:C0:B9:23:2A:A3:F9:03:83:E6 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:97:5a:43:e2:29:22:17:bb:4e:82:08:99:04:65:8b:e8:bf: 4b:d8:70:a2:ba:8a:57:a1:b1:e7:16:79:1f:86:3f:3e:85:c6: 0f:bf:f2:57:9e:74:02:f0:26:26:ce:cf:6c:6c:e9:67:a1:6a: 28:73:97:0f:b2:87:8d:7b:06:6c:5e:4a:8e:67:e2:07:6e:b5: c9:a2:a7:97:c0:9e:0c:ba:c7:16:61:bc:ae:a3:3a:6f:84:98: ae:6b:ac:85:3b:a5:c7:62:03:11:b9:af:87:11:89:7f:37:e6: 90:20:27:47:7e:b5:21:86:c7:e9:92:83:e6:84:b0:87:12:bb: a6:e4:fd:5c:a1:b1:bf:42:2b:1c:8f:c5:f1:53:a0:11:88:fe: 1a:0e:5f:20:0b:98:a1:1c:94:64:72:88:1d:40:d6:5b:3d:96: b2:29:ab:5c:02:83:11:e4:a0:f2:83:3b:75:5f:c8:2a:b4:19: 6e:24:b3:80:b6:e0:8c:71:b7:80:5b:fd:57:d9:62:33:91:be: d2:c4:6a:4a:11:d1:00:75:26:aa:fc:55:06:d6:45:60:18:24: 47:fa:c1:74:8a:aa:96:f3:c4:01:44:6d:a0:41:3d:b1:9f:b3: e4:eb:7a:a8:c6:9f:24:46:f3:6c:0e:a4:b9:dc:8f:92:36:1f: 4b:79:aa:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNjI5MDAwNDI4WhcNMjUwNzA2MDAwNDI4WjAYMRYwFAYD VQQDEw02ODYwODMwYy05Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDJVXJ4d2JXIOiQqtTcDknGI8W+HTp6G9m1wgIYSrVABhJw8eRWhVjud2EGf dbuUEBKmgCBACm5X2lOGN7Aof4QDcFfbu8IOAY6bxDocl3ICXXlwvZeO3mYRxnFX WlFfUjcD5VE71RRiwKhn3ds3CzPtCmpe6QhgGzSZ6n+wKKLiYKefRUt6FQ9yUR9K l3e9fvozj1XL+O5IkxKwN5B8+Eaef/p8KVR7ew+PjHbXPP2Pcw4GuOdBtp/O3SVh UgEVvdH5y9Ea+IpXhjP1dxsXblg3CJIxyg6xUULN7OyqM+4T2NPBvsjWXOM9jgyT eXJdMXa6zgQmYW6zxVNfT/x8rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKYjuVt QQC2Q8lQwLkjKqP5A4PmMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCl1pD4ikiF7tOggiZBGWL6L9L2HCiuopXobHnFnkfhj8+hcYPv/JX nnQC8CYmzs9sbOlnoWooc5cPsoeNewZsXkqOZ+IHbrXJoqeXwJ4MuscWYbyuozpv hJiua6yFO6XHYgMRua+HEYl/N+aQICdHfrUhhsfpkoPmhLCHErum5P1cobG/Qisc j8XxU6ARiP4aDl8gC5ihHJRkcogdQNZbPZayKatcAoMR5KDygzt1X8gqtBluJLOA tuCMcbeAW/1X2WIzkb7SxGpKEdEAdSaq/FUG1kVgGCRH+sF0iqqW88QBRG2gQT2x n7Pk63qoxp8kRvNsDqS53I+SNh9LeapZ -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:42 2025 by rpki-client